From d6a94eda00a3df51f59ed893e6c0a7669d4ce563 Mon Sep 17 00:00:00 2001
From: jim-p <jimp@pfsense.org>
Date: Wed, 1 Jul 2015 11:15:13 -0400
Subject: [PATCH] Encode ca/cert descr in vpn_ipsec_phase1.php

---
 usr/local/www/vpn_ipsec_phase1.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/usr/local/www/vpn_ipsec_phase1.php b/usr/local/www/vpn_ipsec_phase1.php
index 79cf671c40..2c9006cf85 100644
--- a/usr/local/www/vpn_ipsec_phase1.php
+++ b/usr/local/www/vpn_ipsec_phase1.php
@@ -877,7 +877,7 @@ function dpdchkbox_change() {
 										$selected = "selected=\"selected\"";
 									}
 							?>
-								<option value="<?=$cert['refid'];?>" <?=$selected;?>><?=$cert['descr'];?></option>
+								<option value="<?=$cert['refid'];?>" <?=$selected;?>><?=htmlspecialchars($cert['descr']);?></option>
 							<?php endforeach; ?>
 							</select>
 							<br />
@@ -897,7 +897,7 @@ function dpdchkbox_change() {
 										$selected = "selected=\"selected\"";
 									}
 							?>
-								<option value="<?=$ca['refid'];?>" <?=$selected;?>><?=$ca['descr'];?></option>
+								<option value="<?=$ca['refid'];?>" <?=$selected;?>><?=htmlspecialchars($ca['descr']);?></option>
 							<?php endforeach; ?>
 							</select>
 							<br />